flask-extensions/Flask-GoogleMaps

CSP issue

cdruet opened this issue · 0 comments

I got the following error in the console:
Refused to execute inline script because it violates the following Content Security Policy directive: "script-src 'self' 'unsafe-eval' stackpath.bootstrapcdn.com code.jquery.com kit.fontawesome.com maps.googleapis.com checkout.stripe.com 'nonce-R_2iQM1QL1qq1_dUj9Ctiw'". Either the 'unsafe-inline' keyword, a hash ('sha256-JHLGDzX9bm+oASwW1JbRPQQA4Ppum0Z0jhnHgHmTh5U='), or a nonce ('nonce-...') is required to enable inline execution.

My CSP implies that I use nonce when inlining scripts. I wonder how to do that. I guess that should be one of the argument of the Map instantiator.